2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-2981HIGH7Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1...
CVE-2020-2978MEDIUM4.1Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that a...
CVE-2020-2977MEDIUM4.6Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte...
CVE-2020-2976MEDIUM5.4Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte...
CVE-2020-2975MEDIUM5.4Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte...
CVE-2020-2974MEDIUM5.4Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte...
CVE-2020-2973MEDIUM5.4Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte...
CVE-2020-2972MEDIUM5.4Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte...
CVE-2020-2971MEDIUM5.4Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte...
CVE-2020-2969MEDIUM6.6Vulnerability in the Data Pump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 1...
CVE-2020-2968HIGH8Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12....
CVE-2020-2967HIGH7.5Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ver...
CVE-2020-2966MEDIUM5.4Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions...
CVE-2020-2562MEDIUM6.1Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor ...
CVE-2020-2513MEDIUM5.4Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte...
CVE-2020-2228HIGH8.8Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting in ...
CVE-2020-2227MEDIUM5.4Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in...
CVE-2020-2226MEDIUM5.4Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, re...
CVE-2020-2225MEDIUM5.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of ...
CVE-2020-2224MEDIUM5.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of ...
CVE-2020-2223MEDIUM5.4Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream...
CVE-2020-2222MEDIUM5.4Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the job name in the 'Keep this build forever' badge t...
CVE-2020-2221MEDIUM5.4Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a bu...
CVE-2020-2220MEDIUM5.4Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resultin...
CVE-2020-15117MEDIUM6.5In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now